Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
File:                     CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json)
Hash identifier:          ZCXtty321KOUP2bNSUBEKMeHEKWoUNWz0BgKYkwiuBk=
Subject key identifier:   3A:9C:45:A3:DB:8D:3D:C2:4B:20:0C:EF:06:9F:77:37:7D:9F:E2:EB
Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
Certificate issuer:       /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Certificate serial:       7BA581A558BA2F59D0E26EA994EF860DD2000C08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
Manifest number:          022F
Signing time:             Tue 28 Apr 2026 00:52:31 +0000
Manifest this update:     Tue 28 Apr 2026 00:47:31 +0000
Manifest next update:     Fri 01 May 2026 04:32:31 +0000
Files and hashes:         1: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gW58Bt6Gz49TMr81C5jMAuCRmOf4ew6UR7uHG5yi3xs=)
                          2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=)
                          3: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: UX3Y52jIIf1MqrHc93RwRsTO8wRIMV+eLK4SvG5CqAg=)
                          4: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: eF36F2O8aJxtQTB4dhuIgesGEoNbnpucx3HVN8PdcpY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a5:81:a5:58:ba:2f:59:d0:e2:6e:a9:94:ef:86:0d:d2:00:0c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
        Validity
            Not Before: Apr 28 00:47:31 2026 GMT
            Not After : May  1 04:32:31 2026 GMT
        Subject: CN=3A9C45A3DB8D3DC24B200CEF069F77377D9FE2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:7b:87:b3:a4:8b:d8:33:4a:ad:4d:90:be:
                    e7:3b:32:be:29:6d:59:ed:de:ca:af:82:77:d3:f2:
                    13:25:f7:e6:5a:20:8b:8d:af:3a:07:f7:c5:2e:72:
                    11:cc:df:3f:f6:48:cf:84:a9:ca:de:c9:40:ee:28:
                    73:98:23:fb:3c:6e:f4:5b:84:b7:e0:d2:08:34:af:
                    cc:f9:77:47:21:cb:95:59:44:d6:22:95:22:86:bf:
                    c4:d5:9b:04:05:4b:a6:26:a6:df:b2:75:ce:0e:2c:
                    12:71:0f:4c:9b:63:fc:21:38:95:a7:d3:ee:98:0b:
                    7c:17:50:f1:c0:94:8b:00:77:df:25:6c:0b:74:e5:
                    2d:50:f2:e4:f9:64:18:98:2d:91:d3:6e:04:7a:73:
                    c6:a7:ba:c1:3f:d0:ba:e3:85:2b:d5:7b:7a:26:d6:
                    c0:a1:ca:e0:db:c9:2e:da:cb:bf:68:d8:49:54:60:
                    2a:e3:fd:8f:df:87:2b:fd:65:72:10:f9:b6:b5:9b:
                    7d:84:d0:9d:c3:44:51:4e:d5:60:db:05:dc:d9:46:
                    df:6f:04:da:2e:50:1a:67:70:b0:4d:89:51:39:db:
                    e4:9a:2b:e9:6d:ce:50:5c:db:fb:c5:ff:67:24:b2:
                    58:e7:6e:97:df:1a:48:8a:25:bb:be:5f:8e:3d:19:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9C:45:A3:DB:8D:3D:C2:4B:20:0C:EF:06:9F:77:37:7D:9F:E2:EB
            X509v3 Authority Key Identifier:
                keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:01:b3:0e:e3:a0:5a:f0:cf:5e:b1:49:d8:16:54:0c:db:
         0f:dd:3d:69:82:37:42:3c:44:56:38:11:7a:90:6a:76:3d:0e:
         81:e3:dc:9b:3e:c7:96:75:54:67:9e:6b:e5:d6:52:c9:d4:b0:
         b7:e8:f2:de:91:e9:33:12:74:a5:a9:09:67:05:73:5f:0e:1b:
         87:8b:91:6c:26:0b:87:2f:44:8f:ad:74:0c:50:06:ba:11:7a:
         e3:ae:1c:47:9b:64:a7:e9:11:ae:25:23:ad:13:3a:9b:26:e1:
         20:5d:33:85:71:9e:3e:65:c2:b4:94:a2:89:ed:8c:b8:f5:f0:
         78:d7:17:76:a6:9e:77:e9:43:ad:d6:a1:0f:93:df:cc:41:24:
         8c:4a:a5:c4:db:0c:35:6d:5c:6d:fe:0f:ae:b4:c0:6a:0f:a3:
         b5:0e:4a:06:dd:c8:40:2b:fa:a8:d5:b4:6f:c2:08:6f:3f:68:
         9b:64:bc:5e:60:a9:4c:56:fa:20:f2:dd:50:35:49:b8:e4:1e:
         24:34:2a:d1:84:a5:ee:d5:22:a0:3e:0e:8c:68:6c:80:3f:a5:
         21:6e:fd:4e:e9:a2:35:10:d2:fd:1b:76:eb:d7:56:41:66:95:
         9b:d4:4c:30:22:b3:b8:28:b9:ee:b5:37:b4:1f:8e:bc:c4:c8:
         6d:91:f8:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe6WBpVi6L1nQ4m6plO+GDdIADAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz
MEIzNDVGNDAeFw0yNjA0MjgwMDQ3MzFaFw0yNjA1MDEwNDMyMzFaMDMxMTAvBgNV
BAMTKDNBOUM0NUEzREI4RDNEQzI0QjIwMENFRjA2OUY3NzM3N0Q5RkUyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4XuHs6SL2DNKrU2Qvuc7Mr4p
bVnt3sqvgnfT8hMl9+ZaIIuNrzoH98UuchHM3z/2SM+EqcreyUDuKHOYI/s8bvRb
hLfg0gg0r8z5d0chy5VZRNYilSKGv8TVmwQFS6Ympt+ydc4OLBJxD0ybY/whOJWn
0+6YC3wXUPHAlIsAd98lbAt05S1Q8uT5ZBiYLZHTbgR6c8anusE/0LrjhSvVe3om
1sChyuDbyS7ay79o2ElUYCrj/Y/fhyv9ZXIQ+ba1m32E0J3DRFFO1WDbBdzZRt9v
BNouUBpncLBNiVE52+SaK+ltzlBc2/vF/2cksljnbpffGkiKJbu+X449GSDPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOpxFo9uNPcJLIAzvBp93N32f4uswHwYDVR0j
BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC
MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz
NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw
MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB
NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACUtAbMO46Ba8M9esUnYFlQM2w/dPWmCN0I8
RFY4EXqQanY9DoHj3Js+x5Z1VGeea+XWUsnUsLfo8t6R6TMSdKWpCWcFc18OG4eL
kWwmC4cvRI+tdAxQBroReuOuHEebZKfpEa4lI60TOpsm4SBdM4Vxnj5lwrSUoont
jLj18HjXF3amnnfpQ63WoQ+T38xBJIxKpcTbDDVtXG3+D660wGoPo7UOSgbdyEAr
+qjVtG/CCG8/aJtkvF5gqUxW+iDy3VA1SbjkHiQ0KtGEpe7VIqA+DoxobIA/pSFu
/U7pojUQ0v0bduvXVkFmlZvUTDAis7goue61N7QfjrzEyG2R+Gg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:28 2026 by rpki-client